Add members to your portal

If the portal has been configured to access your organization's Active Directory, LDAP, or SAML groups, organization-specific accounts can be added in bulk based on their Active Directory, LDAP, or SAML group membership.

You can add built-in accounts individually or in bulk using the portal.

If you're using the portal's built-in store to manage members, the member's account is added to the built-in identity store and appears in the portal. The account information is stored in the portal.

If you're using organization-specific logins or identity store to manage members, the account information is read from the organization-specific identity provider and appears as an entry in the portal. The account authentication information is not stored in the portal.

To learn more about how members are managed in the portal, see Managing access to your portal. For full instructions on how to add members to your portal, see the steps in the sections below.

Allow users to add their own accounts

Organization-specific accounts

If your portal is configured with an organization-specific identity store, you can configure the portal to register these accounts with it the first time the organization-specific accounts connect to it. By default, new installations of portal do not allow accounts from an organization-specific identity store to be registered to the portal automatically. For full instructions on how to configure your portal to allow this, see Automatic registration of organization-specific accounts.

Add accounts using the portal

Using the portal, you can add built-in or organization-specific accounts to the organization. Accounts can be added individually or in bulk using a comma-separated values (CSV) file. If the portal has been configured to access your organization's Active Directory, LDAP, or SAML groups, organization-specific accounts can be added from Active Directory, LDAP, or SAML groups in your organization.

Add built-in members

You can add built-in members one at a time or in bulk from a file.

One at a time

1. Verify that you are signed in as an Administrator of your organization.
2. Click Organization > Members > Add Members.
3. On the Add Members page, under Method, select the Add built-in portal members option and click Next.
4. Click the New member tab and provide the following information:
   • First name—The user's first name (for example, Jon).
   • Last name—The user's last name (for example, Cho).
   • Email address—An email address for the user, for example, [e-mail]. If an email address is not available, use the email address of the Administrator.
   • Username—The user name alias for the account. The user name is populated automatically based on the email address. You can modify it as desired (for example, jcho11). The user name must be between 6 and 128 ASCII characters. Some areas of ArcGIS Enterprise require that you enter a case sensitive user name. You must inform the user of their user name.
   • User type—The user type to which the user will be assigned. Select any available user type from the drop-down list. You can click the compatible roles and compatible add-on licenses count to find out more about what is compatible with the selected user type. For more information, see User types, roles, and privileges.
   • Role—The role to which the member will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role) that is compatible with the selected user type.
   • Password—A password for the account (for example, jcho.1234). The password must be at least eight characters and have at least one number and letter. You must inform the user of their password. It's recommended that you encourage the user to change their password after signing in for the first time.
5. Click Next to complete adding this user, or Next, add another to add more users.
6. On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
7. On the Set member properties page, you can assign add-on licenses, groups, and settings to the selected members.
   1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)

      If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.

   2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
   3. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
8. Click Next.
9. Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the portal. The users can now sign in using the credentials you specified.

From a file

1. Create a plain-text CSV file that contains information for each member account. The first line must contain header information with these field names: First Name, Last Name, Email, Username, Password, Role, and User type. Subsequent lines include the actual member account information as follows:

   Tip:

   To download a UTF-8 encoded CSV file with the required fields prepopulated in your specified language, click Download CSV template on the Add members from a file page (step 6 below).

   • First Name—The user's first name (for example, Jon).
   • Last Name—The user's last name (for example, Cho).
   • Email—An email address for the user, for example, [e-mail]. If an email address is not available, use the email address of the Administrator.
   • Username—The user name alias for the account. The user name is populated automatically based on the email address. You can modify it as desired (for example, jcho11). The user name must be between 6 and 128 ASCII characters. Some areas of ArcGIS Enterprise require that you enter a case sensitive user name. You must inform the user of their user name.
   • Password—A password for the account (for example, jcho.1234). The password must be at least eight characters and have at least one number and letter. You must inform the user of their password. It's recommended that you encourage the user to change their password after signing in for the first time.
   • Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
   • User Type—The user type to which the user will be assigned. This can include any user type available to your organization. For more information, see User types, roles, and privileges.

   The format for the file is as follows:

   First Name,Last Name,Email,Username,Password,Role,User Type
   Jon,Cho,[e-mail],jcho11,jcho.1234,publisher,Creator
   Satish,Rajhandas,[e-mail],srajhandas,sraj.abcd1,viewer,Viewer
   

2. Save the document as a plain-text CSV file and close it.
3. Verify that you are signed in as an Administrator of your organization.
4. Click Organization > Members > Add Members.
5. On the Add Members page, under Method, select the Add built-in portal members option and click Next.
6. Click the New members from a file tab and click Browse to select the CSV file. Click Open.
7. Verify that each of the required fields have a check mark next to them, and click Next.
8. On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
9. On the Set member properties page, you can assign add-on licenses, groups, and settings to the selected members.
   1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)

      If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.

   2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
   3. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
10. Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the portal. The users can now sign in using the credentials you specified.

Add members using their organization-specific logins

You can add members directly to the organization by creating ArcGIS accounts that the member can access using an organization-specific login. This option is only available if your organization has configured SAML logins or OpenID Connect logins. You can add members one at a time or in bulk using a CSV file.

One at a time

1. Verify that you are signed in as an administrator of your organization.
2. Click Organization > Members > Add Members.
3. Select the Add members for organization-specific logins option and click Next.
4. Click the New member tab and provide the following information:
   • First name—The user's first name (for example, Jon).
   • Last name—The user's last name (for example, Cho).
   • Email address—Email address for the user, for example, [e-mail]. If an email address is not available, use the email address of the Administrator.
   • Identity type—If your organization has both SAML and OpenID Connect configured, select the Identity type option you want to use.
   • Username—The user name for the account. The user name must match the existing SAML or OpenID Connect ID. If it doesn't match, the account will be created but cannot be used. Verify that the SAML or OpenID Connect ID is correct before proceeding.

     Note:

     For SAML logins, the ID value must match the value configured by the identity provider (IDP) for the NameID attribute. For OpenID Connect logins, the ID value must match the unique identifier assigned to each user by the OpenID Connect provider (for example, Google).

   • User type—The user type to which the user will be assigned. Select any available user type from the drop-down list. You can click the compatible roles and compatible add-on licenses count to find out more about what is compatible with the selected user type. For more information, see User types, roles, and privileges.
   • Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
5. Click Next to complete adding this user, or Next, add another to add more users.
6. On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
7. On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
   1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)

      If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.

   2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
   3. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
8. Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The user can now sign in to the portal.

From a file

1. Create a plain-text CSV file that contains information for each member account. The first line must contain header information with these field names: First Name, Last Name, Identity type, Email, Username, Role, and User type. Subsequent lines include the actual member account information as follows:

   Tip:

   To download a UTF-8 encoded CSV file with the required fields prepopulated in your specified language, click Download CSV template on the Add members from a file page (step 6 below).

   • First Name—The user's first name (for example, Jon).
   • Last Name—The user's last name (for example, Cho).
   • Email—An email address for the user, for example, [e-mail]. If an email address is not available, use the email address of the Administrator.
   • Username—The user name for the account. The user name must match the existing SAML or OpenID Connect ID. If it doesn't match, the account will be created but cannot be used. Verify that the SAML or OpenID Connect ID is correct before proceeding.

     Note:

     For SAML logins, the ID value must match the value configured by the identity provider (IDP) for the NameID attribute. For OpenID Connect logins, the ID value must match the unique identifier assigned to each user by the OpenID Connect provider (for example, Google).

   • Identity type—This information is only required if your organization has both SAML and OpenID Connect configured.
   • Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
   • User Type—The user type to which the user will be assigned. This can include any user type available to your organization. For more information, see User types, roles, and privileges.

   If your organization has both SAML and OpenID Connect configured, the format for the file is as follows:

   First Name,Last Name,Email,Username,Identity type,Role,User Type
   Jon,Cho,[e-mail],jcho11,SAML,publisher,GIS Professional Advanced
   Satish,Rajhandas,[e-mail],srajhandas,viewer,Viewer
   

   If your organization has only SAML or OpenID Connect configured, the format for the file is as follows:

   First Name,Last Name,Email,Username,Role,User Type
   Jon,Cho,[e-mail],jcho11,publisher,GIS Professional Advanced
   Satish,Rajhandas,[e-mail],srajhandas,viewer,Viewer
   

2. Save the document as a plain-text CSV file and close it.
3. Verify that you are signed in as an Administrator of your organization.
4. Click Organization > Members > Add Members.
5. Select the Add members for organization-specific logins option and click Next.
6. Click the New members from a file tab and click Browse to select the CSV file. Click Open.
7. Verify that each of the required fields have a check mark next to them, and click Next.
8. On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
9. On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
   1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)

      If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.

   2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
   3. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
10. Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The users can now sign in to the portal.

Add members from AD or LDAP identity providers

If your portal has been configured with an organization-specific identity provider based on Active Directory (AD) or Lightweight Directory Access Protocol (LDAP), organization-specific accounts can be added individually, in bulk, or from AD or LDAP groups managed by the identity provider.

Note:

Accounts must include an email address to be added to the portal. Any special characters in account names will be changed to an underscore (_), except the at sign (@), point (.), or dash (-).

One at a time

1. Verify that you are signed in as an administrator of your organization.
2. Click Organization > Members > Add Members.
3. On the Add members page, select the Add members based on existing Active Directory or LDAP users option and click Next.
4. Click the New member tab and provide the following information:
   • Username—The user name alias for the account. The user name must match the existing Active Directory or LDAP user and format defined in the identity provider (for example, jcho11). Click the magnifying glass to search for and select the desired user name.
   • Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
   • User Type—The user type to which the user will be assigned. Select any available user type from the drop-down list. You can click the compatible roles and compatible add-on licenses count to find out more about what is compatible with the selected user type. For more information, see User types, roles, and privileges.
5. Click Next to complete adding this user, or Next, add another to add more users.
6. On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
7. On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
   1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)

      If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.

   2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
   3. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
8. Verify that the member account information is correct and click Add Members.

The member account is added to the organization. The user can now sign in to the portal.

From a file

1. Create a plain-text CSV file that contains information for each member account. The first line must contain header information with these field names: Username, Role, and User Type. Subsequent lines include the actual member account information as follows:

   Tip:

   To download a UTF-8 encoded CSV file with the required fields prepopulated in your specified language, click Download CSV template on the Add members from a file page (step 6 below).

   • Username—The user name alias for the account. The user name must match the existing Active Directory or LDAP user and format defined in the organization-specific identity provider (for example, jcho11).
   • Role—The role to which the user will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
   • User Type—The user type to which the user will be assigned. This can include any user type available to your organization. For more information, see User types, roles, and privileges.

   The format for the file is as follows:

   Username,Role,User Type
   jcho11,publisher,Editor
   srajhandas,viewer,Viewer
   

2. Save the document as a plain-text CSV file and close it.
3. Verify that you are signed in as an Administrator of your organization.
4. Click Organization > Members > Add Members.
5. Select the Add members based on existing Active Directory or LDAP users option and click Next.
6. Click the New members from a file tab and click Browse to select the CSV file. Click Open.
7. Verify that each of the required fields have a check mark next to them, and click Next.
8. On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
9. On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
   1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)

      If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.

   2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
   3. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)
10. Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The users can now sign in to the portal.

From a group

If your portal has been configured with AD or LDAP-based groups, you can add accounts from the AD or LDAP groups you've connected to your portal. See Create groups for more information.

1. Verify that you are signed in as an Administrator of your organization.
2. Click Organization > Members > Add Members.
3. Select the Add members based on existing Active Directory or LDAP users option and click Next.
4. Click the From a group tab and provide the following information:
   • Active Directory or LDAP Group—The Active Directory or LDAP group name. Click the magnifying glass to search for and select the desired Active Directory or LDAP group.
   • Role—The role to which the selected accounts will be assigned. This can be any role (viewer, user, publisher, data editor, custom role, or administrator role).
   • User Type—The user type to which the member will be assigned. For more information, see User types, roles, and privileges.
5. On the Compile member list page, review the list of members that will be added to the organization. Select and click Remove to remove members from the list if needed. Click Next.
6. On the Set member properties page, you can assign licenses, apps, groups, and settings to the selected members. Click Next.
   1. If you want to assign add-on licenses to the new members and default add-on licenses have not been configured for new organization members (or you want to modify the specified default add-on licenses for the new members), click Manage in the Add-on licenses section. Select the add-on licenses that are compatible with the user types in your member list and click Save. (You only see this option if you have privileges to manage licenses.)

      If you're adding more than one member at a time with different user types, the available licenses are based on the user type with the fewest compatible add-on licenses. For example, if you're adding four Creators and one Editor, and you want to assign ArcGIS Insights, the option won't be available because it's not compatible with both user types. You can click Compile member list to return to the list of new members, select the member with the incompatible user type, and click Remove so you can assign the license. Otherwise, you can assign the add-on licenses later on the Licenses tab.

   2. In the Groups section, if you want to add the new members to groups in your organization and default groups have not been configured for new members (or if you want to modify the specified default groups for the new members), click Manage. Select the desired groups and click Save.
   3. In the Settings section, modify the following member settings: profile visibility, language, number and date format, and a member's start page. (You only see these options if you have privileges to update members.)

If your group is from an LDAP server, members of nested groups are not added to the portal.

7. Review the summary page to ensure the details are correct, then select Add Members to add the new members to your organization.

The member accounts are added to the organization. The users can now sign in to the portal.